HP StorageWorks XP Audit Log reference guide for the XP12000/XP10000 and SVS 200 (5697-7157, November 2007)

Syslog information
file
Settings audit log fileLogin audit log fileComponent
maximum number of
lines and data is being
overwritten.
NOTE:
Do not use the transfer to the FTP server in combination with the manual
download. The line counter will reset if the audit log information file is
downloaded manually while the transfer to the FTP server is specified, and
some information may not be transferred to the FTP server. Therefore,
download the file manually only when the transfer to the FTP server is
disabled due to a failure of the FTP server and other reasons.
The first line of the audit log file is the control information, including the file name and the last time the file
was written.
Control
Information
Audit log file output
The following table describes the operation name and event name being output, depending on the
status of the audit log file (login information, setting information, and syslog information file
components). The event name will be automatically output only once, by the trigger described in the
Output trigger in the following table.
Table 3 Function names and event names output when audit log file is reproduced
Output triggerEvent nameFunction name
Output when abnormal files in the Audit log (login
information, setting information, and syslog information file
components) is reproduced automatically.
Create FileAuditLog
NOTE:
The event name Create File will be output only for the files which has been reproduced.
See “Create File” on page 53 for the example of the output for the function name and the event name
described in Table 3.
Introduction34